Noticed the 432 devices support is near the end so I've decided to give it a try backporting security related patches to LEDE-17.01 abandoned branch https://github.com/maurerr/openwrt
I've generated TEST images for ar71xx and rt305x architectures for now:
SDKs and imagebuilders here: https://github.com/maurerr/lede-17.01.ng-imgbld-sdk/
Before testing make sure you back up your config as described here or better test it on a spare 432 device.
I need your feedback before adding more security related patches (mostly kernel and CVEs)